Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 11 additions & 11 deletions 22 .github/CODEOWNERS
Original file line number Diff line number Diff line change
@@ -1,18 +1,18 @@
* @cli/code-reviewers

pkg/cmd/codespace/ @cli/codespaces
internal/codespaces/ @cli/codespaces
pkg/cmd/codespace/ @cli/codespaces @cli/code-reviewers
internal/codespaces/ @cli/codespaces @cli/code-reviewers

# Limit Package Security team ownership to the attestation command package and related integration tests

Copilot AI Apr 16, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The header comment says ownership is limited to the Package Security team, but the following rules now also include @cli/code-reviewers. Please update the comment to reflect the new intent (e.g., that either team can approve these paths).

Suggested change
# Limit Package Security team ownership to the attestation command package and related integration tests
# Limit ownership of the attestation command package and related integration tests to the Package Security team or @cli/code-reviewers

Copilot uses AI. Check for mistakes.
pkg/cmd/attestation/ @cli/package-security
pkg/cmd/release/attestation/ @cli/package-security
pkg/cmd/release/verify/ @cli/package-security
pkg/cmd/release/verify-asset/ @cli/package-security
pkg/cmd/release/shared/ @cli/package-security
pkg/cmd/attestation/ @cli/package-security @cli/code-reviewers
pkg/cmd/release/attestation/ @cli/package-security @cli/code-reviewers
pkg/cmd/release/verify/ @cli/package-security @cli/code-reviewers
pkg/cmd/release/verify-asset/ @cli/package-security @cli/code-reviewers
pkg/cmd/release/shared/ @cli/package-security @cli/code-reviewers

test/integration/attestation-cmd @cli/package-security
test/integration/attestation-cmd @cli/package-security @cli/code-reviewers

pkg/cmd/attestation/verification/embed/tuf-repo.github.com/ @cli/tuf-root-reviewers
pkg/cmd/attestation/verification/embed/tuf-repo.github.com/ @cli/tuf-root-reviewers @cli/code-reviewers

Copilot AI Apr 16, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Adding @cli/code-reviewers to the TUF root repository embed path broadens who can approve changes in a security-sensitive area. If the intent is to keep this restricted to @cli/tuf-root-reviewers, consider omitting @cli/code-reviewers for this rule (or add an explicit note documenting the policy change).

Suggested change
pkg/cmd/attestation/verification/embed/tuf-repo.github.com/ @cli/tuf-root-reviewers @cli/code-reviewers
pkg/cmd/attestation/verification/embed/tuf-repo.github.com/ @cli/tuf-root-reviewers

Copilot uses AI. Check for mistakes.

pkg/cmd/skills/ @cli/skill-reviewers
internal/skills/ @cli/skill-reviewers
pkg/cmd/skills/ @cli/skill-reviewers @cli/code-reviewers
internal/skills/ @cli/skill-reviewers @cli/code-reviewers
Loading
Morty Proxy This is a proxified and sanitized view of the page, visit original site.